Service Request to a Federated Service Returns "Invalid instance identifier" Error Message

Owned by Petteri Kivimäki
Last updated: Jun 27, 2018

Problem

Service request to a federated service returns "Invalid instance identifier" error message.

Federation is an X-Road feature allows security servers of two different X-Road instances to exchange messages with each other. If a service request to a federated service returns "Invalid instance identifier" error message, federation is disabled on the client-side Security Server.

Invalid instance identifier
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Body>
    <SOAP-ENV:Fault>
      <faultcode>Server.ClientProxy.InternalError</faultcode>
      <faultstring>Invalid instance identifier: instanceIdentifierOfFederatedInstance</faultstring>
      <faultactor></faultactor>
      <detail>
        <faultDetail xmlns="">cb451f88-45c3-40e3-9a0d-0d3d1ea6e523</faultDetail>
      </detail>
    </SOAP-ENV:Fault>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

Solution

X-Road instances are federated at the central server level. After this, Security Servers can be configured to opt-in to the federation. By default, federation is disabled and configuration data for other X-Road instances will not be downloaded.

Instructions for enabling federation for the Security Server are available at https://github.com/nordic-institute/X-Road/blob/develop/doc/Manuals/ug-ss_x-road_6_security_server_user_guide.md#18-federation.